🛠 Haveged 1.9.12 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
haveged is a daemon that feeds the /dev/random pool on Linux using an adaptation of the HArdware Volatile Entropy Gathering and Expansion algorithm invented at IRISA. The algorithm is self-tuning on machines with cpuid support, and has been tested in both 32-bit and 64-bit environments. The tarball uses the GNU build mechanism, and includes self test targets and a spec file for those who want to build an RPM.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Haveged 1.9.12 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🛠 Lynis Auditing Tool 3.0.0 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Lynis is an auditing tool for Unix (specialists). It scans the system and available software to detect security issues. Beside security related information it will also scan for general system information, installed packages and configuration mistakes. This software aims in assisting automated auditing, software patch management, vulnerability and malware scanning of Unix based systems.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Lynis Auditing Tool 3.0.0 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
❌ IcedID Banker is Back, Adding Steganography, COVID-19 Theme ❌
📖 Read
via "Threatpost".
The malware has boosted its anti-detection capabilities in a new email campaign.📖 Read
via "Threatpost".
Threat Post
IcedID Banker is Back, Adding Steganography, COVID-19 Theme
The malware has boosted its anti-detection capabilities in a new email campaign.
🔐 Cybersecurity risks in a possible US manufacturing resurgence 🔐
📖 Read
via "Security on TechRepublic".
When factories, notably in China, shuttered during the COVID-19 pandemic, products the US relied on were impacted. Here's how experts see a return to "Made in America" and the incumbent risks.📖 Read
via "Security on TechRepublic".
TechRepublic
Cybersecurity risks in a possible US manufacturing resurgence
When factories, notably in China, shuttered during the COVID-19 pandemic, products the US relied on were impacted. Here's how experts see a return to "Made in America" and the incumbent risks.
🔐 Microsoft 365 phishing campaign exploits Samsung, Adobe, and Oxford University 🔐
📖 Read
via "Security on TechRepublic".
The attack redirects users through legitimate websites in an attempt to capture their Microsoft credentials, says Check Point Research.📖 Read
via "Security on TechRepublic".
🔐 Popular mobile banking apps are riddled with security flaws, and Android users are more at risk 🔐
📖 Read
via "Security on TechRepublic".
A study of banking apps for iOS and Android found poor source code protection, cleartext storage of sensitive data, and other serious flaws that make it easy for attackers to break into accounts.📖 Read
via "Security on TechRepublic".
TechRepublic
Popular mobile banking apps are riddled with security flaws, and Android users are more at risk
A study of banking apps for iOS and Android found poor source code protection, cleartext storage of sensitive data, and other serious flaws that make it easy for attackers to break into accounts.
🕴 Adobe Releases PDF Protected Mode for Acrobat DC 🕴
📖 Read
via "Dark Reading: ".
The preview, open to Windows users, opens PDF files in a sandbox to protect users who open malicious Acrobat documents.📖 Read
via "Dark Reading: ".
Dark Reading
Adobe Releases PDF Protected Mode for Acrobat DC
The preview, open to Windows users, opens PDF files in a sandbox to protect users who open malicious Acrobat documents.
🕴 Have Your Say: Dark Reading Video News Desk Seeks Reader Contributions 🕴
📖 Read
via "Dark Reading: ".
We've got questions for you on black infosec, burnout, vulnerabilities, COVID-19, and much more. Send us your video responses and we'll play them in our News Desk broadcast during Black Hat Virtual.📖 Read
via "Dark Reading: ".
Dark Reading
Have Your Say: Dark Reading Video News Desk Seeks Reader Contributions
We've got questions for you on black infosec, burnout, vulnerabilities, COVID-19, and much more. Send us your video responses and we'll play them in our News Desk broadcast during Black Hat Virtual.
🔏 PCI SSC Releases New Standard to Secure Devices 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
A new update to PCI requirements is designed to keep pace with the evolving financial threat environment.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
PCI SSC Releases New Standard to Secure Devices
A new update to PCI requirements is designed to keep pace with the evolving financial threat environment.
ATENTION‼ New - CVE-2019-13033
📖 Read
via "National Vulnerability Database".
In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed. This license can be used to upload data to a central Lynis server. Although no data can be extracted by knowing the license key, it may be possible to upload the data of additional scans.📖 Read
via "National Vulnerability Database".
❌ Facebook’s FTC-Mandated Privacy Committee Now in Effect ❌
📖 Read
via "Threatpost".
Facebook will report its privacy practices to both the committee, the FTC, and to a third-party assessor.📖 Read
via "Threatpost".
Threat Post
Facebook’s FTC-Mandated Privacy Committee Now in Effect
Facebook will report its privacy practices to both the committee, the FTC, and to a third-party assessor.
❌ Google Yanks 106 ‘Malicious’ Chrome Extensions ❌
📖 Read
via "Threatpost".
Trojan Chrome browser extensions spied on users and maintained a foothold on the networks of financial services, oil and gas, media and entertainment, healthcare and pharmaceuticals and government organizations.📖 Read
via "Threatpost".
Threat Post
Google Yanks 106 ‘Malicious’ Chrome Extensions
Trojan Chrome browser extensions spied on users and maintained a foothold on the networks of financial services, oil and gas, media and entertainment, healthcare and pharmaceuticals and government organizations.
🕴 Cisco Patches Flaw in Webex Videoconferencing App 🕴
📖 Read
via "Dark Reading: ".
Vulnerability would have allowed an attacker to gain access to sensitive information on a system, Trustwave's SpiderLab says.📖 Read
via "Dark Reading: ".
Dark Reading
Cisco Patches Flaw in Webex Videoconferencing App
Vulnerability would have allowed an attacker to gain access to sensitive information on a system, Trustwave's SpiderLab says.
🕴 Healthcare CISOs Share COVID-19 Response Stories 🕴
📖 Read
via "Dark Reading: ".
Cybersecurity leaders discussed the threats and challenges that arose during the pandemic, and how they responded, during a virtual roundtable.📖 Read
via "Dark Reading: ".
Dark Reading
Healthcare CISOs Share COVID-19 Response Stories
Cybersecurity leaders discussed the threats and challenges that arose during the pandemic, and how they responded, during a virtual roundtable.
⚠ Ripple20 bugs set off wave of security problems in millions of devices ⚠
📖 Read
via "Naked Security".
Security researchers have discovered a handful of game-changing vulnerabilities that spell trouble for dozens of connected device vendors and their customers.📖 Read
via "Naked Security".
Naked Security
Ripple20 bugs set off wave of security problems in millions of devices
Security researchers have discovered a handful of game-changing vulnerabilities that spell trouble for dozens of connected device vendors and their customers.
🔏 Friday Five: 6/19 Edition 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
Possible beer shortage caused by ransomware, dating apps expose 845 GB of sensitive data, and Zoom reverses controversial security decision - catch up on the week's news with the Friday Five.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Friday Five: 6/19 Edition
Possible beer shortage caused by ransomware, dating apps expose 845 GB of sensitive data, and Zoom reverses controversial security decision - catch up on the week's news with the Friday Five.
⚠ FBI uses T-shirt, tattoo and Vimeo clips to track down alleged arsonist ⚠
📖 Read
via "Naked Security".
Amazing what online search, social media profiles, a DMV database and cameras everywhere can turn up about us.📖 Read
via "Naked Security".
Naked Security
FBI uses T-shirt, tattoo and Vimeo clips to track down alleged arsonist
Amazing what online search, social media profiles, a DMV database and cameras everywhere can turn up about us.
❌ Netgear Zero-Day Allows Full Takeover of Dozens of Router Models ❌
📖 Read
via "Threatpost".
An unpatched vulnerability in the web server of device firmware gives attackers root privileges, researchers said.📖 Read
via "Threatpost".
Threat Post
Netgear Zero-Day Allows Full Takeover of Dozens of Router Models
An unpatched vulnerability in the web server of device firmware gives attackers root privileges, researchers said.
⚠ IBM Maximo Asset Management servers patched against attacks ⚠
📖 Read
via "Naked Security".
As the name suggests, IBM Maximo is typically used by really big companies to track really huge numbers of assets...📖 Read
via "Naked Security".
Naked Security
IBM Maximo Asset Management servers patched against attacks
As the name suggests, IBM Maximo is typically used by really big companies to track really huge numbers of assets…
🕴 'New Normal' Caption Contest Winners 🕴
📖 Read
via "Dark Reading: ".
Competitors submitted lots of clever virus puns, and the prizes go to ...📖 Read
via "Dark Reading: ".
Dark Reading
'New Normal' Caption Contest Winners
Competitors submitted lots of clever virus puns, and the prizes go to ...
🕴 How to Secure Machine Learning 🕴
📖 Read
via "Dark Reading: ".
Part two of a series on avoiding potential security risks with ML.📖 Read
via "Dark Reading: ".
Dark Reading
How to Secure Machine Learning
Part two of a series on avoiding potential security risks with ML.